Privacy Policy
Last updated: October 16, 2026
MazzLabs Technology Services LLC ("MazzLabs", "we", "us") provides custom software development, infrastructure, maintenance, and consulting services, builds software that runs in client environments, and operates the website at mazzlabs.xyz and the client portal at app.mazzlabs.xyz. This policy explains what information we collect, why, who we share it with, and the choices you have.
1. Information you give us
- Contact form. Your name, email, company, the topic you select, and your message.
- Project request form. Your name, email, company, phone number, a description of your project and your current systems, budget range, timeline, and how you heard about us.
- Client portal account. Your name, email, company, and phone number. If you ask for an account on the project request form, we create it and email you a link to set your password.
- Support tickets. Ticket titles, descriptions, and the replies exchanged with us.
- Website chat. Messages you type into the chat assistant on mazzlabs.xyz, along with the page you were on. We keep them so we can follow up and improve the assistant's answers. Please don't share passwords or other secrets in the chat.
- Project comments and files. Comments you post on a project and files you upload to it (up to 25 MB each), stored on our servers in the United States and included in our backups.
- MazzLabs Cloud. If you use our cloud workstations, the names and email addresses of your users, sign-in and usage records, and the files and software your users keep on their workstations. This data is hosted by our cloud platform provider (see section 4).
- Agreements and documents. Service agreements, scopes, quotes, and signed copies you return to us.
- Billing. Invoice details and payment status. Payments are made through third-party payment providers; we do not receive or store your full card or bank account numbers.
- Client content and system access. Data, files, and credentials you provide so we can build, run, or maintain your systems. We use these only to perform the work you engaged us for. When our software runs in your own environment, such as on-premises or air-gapped, the data it processes stays there; we access it only when you give us access for support.
2. Information collected automatically
- Server logs. IP address, browser and device type, pages requested, referring URL, and timestamps.
- Website analytics. mazzlabs.xyz uses Google Analytics to understand which pages are visited, for how long, and how visitors found the site.
- Email delivery events. For emails we send you (for example invoices and reminders), our email service records delivery, bounce, and open events.
3. How we use information
- To reply to inquiries and evaluate project requests
- To deliver, host, monitor, back up, and support the systems we build or manage for you
- To create and operate your client portal account
- To prepare agreements and send invoices, payment reminders, and receipts
- To keep our services secure, including detecting abuse and investigating incidents
- To understand and improve how our website is used
- To meet legal, tax, and accounting obligations
We do not sell personal information, and we do not use it for advertising.
4. Who we share information with
We share information only with the service providers that help us operate, and only as much as they need:
- Amazon Web Services — cloud infrastructure, document storage, and email delivery infrastructure
- RackNerd — server hosting
- Novo — invoicing and payment processing
- Google — website analytics (Google Analytics) and web fonts (Google Fonts)
- V2Cloud Solutions, Inc. (Canada) — hosts and operates MazzLabs Cloud workstations as a data processor under its Data Processing Addendum. V2 Cloud uses its own infrastructure providers and sub-processors, listed in its Privacy Policy, so MazzLabs Cloud data may be stored and processed in Canada, the United States, or the data center region chosen for your account.
- ReplyForge — the website chat assistant; a MazzLabs product
- OpenAI — generates the chat assistant's replies from the messages you send it
- SpellSend and DeployVault — transactional email and encrypted backups; both are MazzLabs products
Each provider handles data under its own privacy policy. We may also disclose information when required by law, to protect our rights or the security of our services, or in connection with a sale or reorganization of our business.
5. Storage and security
Information is stored on servers in the United States. Our safeguards include encrypted connections (TLS) for data in transit, hashed passwords, encryption for stored documents and backups, role-based access controls, continuous server monitoring, and weekly vulnerability scanning of the software we run. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
6. How long we keep information
- Client accounts and project data: for as long as we work together, and afterwards as set out in your agreement.
- Inquiries that do not become projects: as long as needed to respond and follow up, and deleted on request.
- Invoices and billing records: as long as required for tax and accounting purposes.
- Server logs: up to 90 days.
7. Your choices and rights
You can ask us to access, correct, export, or delete the personal information we hold about you, or object to a particular use of it. Depending on where you live, state privacy laws may give you additional rights. We will not treat you differently for exercising them. To make a request, email vmazucato@mazzlabs.xyz; we may need to verify your identity first.
8. Cookies and analytics
The client portal keeps you signed in using session tokens stored in your browser for the duration of your session. The public website uses Google Analytics, which sets cookies to distinguish visitors. You can block these cookies in your browser settings or install the Google Analytics opt-out add-on.
9. Children
Our services are intended for businesses and adults. We do not knowingly collect personal information from anyone under 18, and we delete it if we learn we have.
10. Security incidents
If we confirm a security breach affecting your personal information, we will notify affected clients within 72 hours of confirming it and explain what happened and what we are doing about it.
11. Changes to this policy
We may update this policy. For material changes we will email active clients before the changes take effect, and the date at the top of this page always shows the latest version.